Privacy Policy

Last updated: June 21, 2026

This Privacy Policy explains how tapa. ("we", "us", "our") collects, uses and protects information when you use our website and link-in-bio platform at tapa.so (the "Service").

1. Who we are

tapa. is a link-in-bio builder that lets creators and businesses publish a public page with links, contact forms, booking blocks and analytics. If you have questions about this policy, contact us at privacy@tapa.so.

2. Information we collect

Account holders. When you register, we collect your email, username, password (stored as a secure hash), profile details you provide (name, bio, avatar) and page content you create.

Visitors to public pages. When someone views a tapa. page, we may collect:

• Anonymous visitor and session identifiers stored in the browser (only with your consent)
• A one-way hash of the IP address — we never store raw IP addresses
• Browser user agent, referrer and event type (page view, link click, form submission, booking)
• Information submitted through contact or booking forms (name, email, message)

3. How we use information

• Provide, operate and improve the Service
• Authenticate users and secure accounts
• Show page owners analytics about views, clicks, leads and bookings
• Detect bots and suspicious traffic to protect analytics integrity
• Respond to support requests and legal obligations

4. Legal bases (EEA/UK users)

We process data based on: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, product improvement) and consent (optional analytics and preference cookies on public pages).

5. Data sharing

We do not sell your personal data. We may share data with infrastructure providers (hosting, database, email) who process it on our behalf under contractual safeguards, or when required by law.

6. Retention

Account data is kept while your account is active. Analytics events are retained for reporting purposes and may be aggregated or deleted according to our internal retention schedule. You may request deletion of your account and associated data.

7. Your rights

Depending on your location, you may have the right to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent for optional cookies at any time via our cookie banner or browser settings.

8. Security

We use industry-standard measures including encrypted connections, password hashing and salted IP hashing. No method of transmission over the internet is 100% secure.

9. International transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children.

11. Changes

We may update this policy from time to time. We will post the revised version on this page with an updated date.

12. Related documents

See also our Cookie Policy for details on cookies and local storage.